OWASP WebGoat on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.